ksecuremessage-storage-encryption/dev.kreienbuehl.ksecuremessage.storage.encryption/SealedRecords

SealedRecords

Reads the header of a sealed storage record without decrypting it, for storage key rotation (docs/storage-key-rotation.md). Only the format module knows the record layout; storage adapters use this instead.

Properties

HEADER_SIZE

const val HEADER_SIZE: Int

Size of the record header that header returns.

Functions

header

fun header(keyId: StorageKeyId): ByteArray

The header every record sealed with key keyId starts with.

keyId

fun keyId(record: ByteArray): StorageKeyId

The ID of the key that sealed record. Checks magic, version, algorithm and minimum size; throws StorageEncryptionException. Does not authenticate the record.